Privacy Policy
This Privacy Policy describes how DMC Stack ("we", "us", or "our") collects, uses, and protects your personal information across our products: CellarHive, BookKeep Me, and Beer Me. We are committed to protecting your privacy and complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Who We Are
DMC Stack is the trading name of DMC STACK PTY LTD (ABN 99 698 042 027, ACN 698 042 027), an Australian software company operating from Western Australia. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can contact us at hello@dmcstack.au.
2. Information We Collect
Depending on which product you use, we may collect:
- Account information: name, email address, business name, ABN
- Usage data: how you interact with our apps (pages visited, features used) — used to improve the products and provide a better service to you. It is never sold, never used to build a profile of you, and we do not use third-party advertising or tracking services in our own apps. A venue can add its own analytics to its public CellarHive page; that is the venue’s own service, configured and controlled by them.
- Financial data (BookKeep Me): invoices, expenses, receipt images, bank transaction data you upload — this data is private to your account and never used for cross-user analytics
- Business data (CellarHive): your venue’s own trading records — stock levels, takings, staff rosters and compliance records. You enter these, or the platform records them as you trade, and we hold them solely to operate the platform for your venue. Your menu and beer prices are also published to Beer Me, our consumer app, so drinkers can find your venue — your takings, costs and rosters are not. Your sales figures are never shared with, compared against, or benchmarked against another venue — every calculation runs against your venue’s data alone.
- Device data: device type, operating system, push notification tokens
- Payment information: processed securely via Stripe — we do not store card details
3. How We Use Your Information
We use your information to:
- Run the products you are using — process your records, orders, stock, rosters and payments, and produce the reports, figures and reminders you rely on
- Improve those products by finding what is slow, broken or confusing and fixing it, and by making our automatic data extraction more accurate for your account
- Send account-related notifications (receipts, reminders, alerts)
- Respond to support enquiries
- Comply with legal obligations
- Provide AI-powered features. Receipts, invoices and bank statements you upload to BookKeep Me are read by Amazon Textract in Sydney and never leave Australia. Photographs of a pub or venue menu (Beer Me, CellarHive) are read by Google’s Gemini API — see Sharing Your Data below for exactly what is sent and to whom
4. Data Storage & Security
Your data is stored on AWS infrastructure in Australia — Sydney (ap-southeast-2). Payroll, tax file number and taxpayer data does not leave Australia. Data is encrypted in transit (TLS 1.3; TLS 1.2 and earlier are refused) and at rest (AES-256 / AWS KMS). Administrative access requires multi-factor authentication and privileged actions are written to an append-only audit log.
Financial data in BookKeep Me is stored in an isolated per-user silo. Raw financial amounts are never shared across accounts or used for aggregate analytics.
5. Sharing Your Data
We do not sell your personal information. We may share data with:
- AWS — cloud infrastructure (storage, compute), and Amazon Textract for reading uploaded receipts, invoices and bank statements. Textract runs in the Sydney (ap-southeast-2) region; those documents are not transmitted outside Australia.
- Stripe — payment processing
- Google (Gemini API) — menu photographs only. Where you photograph a pub or venue menu in Beer Me or CellarHive so its items can be read automatically, that image is sent to Google’s Gemini API for text recognition. A menu is public information about a venue’s products and prices; it contains no financial or personal information about you. Your receipts, invoices and bank statements are not sent to Google.
- Law enforcement — if required by Australian law
Overseas disclosure (APP 8). Your financial documents are not disclosed overseas. Receipts, invoices and bank statements uploaded to BookKeep Me are read by Amazon Textract inside Australia (Sydney), and their contents are not sent to any overseas provider. The only content we send outside Australia is a photograph of a venue menu, processed by Google on infrastructure that may be located outside Australia. We remain accountable for that handling. Google is engaged under paid commercial API terms, under which your content is not used to train Google’s models. Everything else — your account, your records and your stored files — stays in Australia.
6. Your Rights
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and data — other than records we are required by law to retain, which are listed in Data Retention below
- Opt out of marketing communications
To exercise these rights, email hello@dmcstack.au.
7. Cookies & Analytics
Our websites may use cookies for authentication and session management. We do not use third-party advertising cookies. We may use privacy-respecting analytics to understand how our products are used.
8. Data Retention
We do not keep your information indefinitely, and we cannot delete everything on request. Two different laws set the boundaries, and this section states both.
Records we must keep. Records explaining business transactions — invoices, expenses, receipts and bank transaction data — are retained for 5 years from the end of the Australian financial year they relate to, as required by section 262A of the Income Tax Assessment Act 1936. Employee and payroll records are retained for 7 years, as required by regulation 3.31 of the Fair Work Regulations 2009. These obligations are yours as well as ours, so we cannot delete these records early even at your request. Once the period ends, they are destroyed.
Everything else — your account, authentication and session data, device tokens, and the correction data used to improve accuracy for your account — is destroyed within 30 days of your account closing.
Closing an account starts a short grace period before destruction begins, so a closure made in error can still be reversed. When you close your account we will tell you what is being destroyed and what is being retained, and under which obligation.
9. Age Requirement
Our products are intended for users aged 18 and over. Beer Me involves alcohol pricing and venue discovery. CellarHive is a licensed venue management platform. BookKeep Me handles financial and business data. None of our products are directed at, or suitable for, persons under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a person under 18 has provided us with personal information, we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. We'll notify you of significant changes via email or in-app notice. The latest version is always available at dmcstack.au/privacy.
11. Contact Us
For privacy enquiries, complaints, or data requests:
We aim to respond within 5 business days.